Quantcast
Channel: Security Vulnerability
Viewing all articles
Browse latest Browse all 317

pass record id in secure way from client to web service

$
0
0

is passing record id in asp.net Ajax data property a secure way , is there any alternative way to pass record id from javascript to webservice , so the user don't change the record id in between and update record he is not authurized to do so

i have a scenario where the user like a post and i pass record id to web service , since the record id is readonly to user the user can change the record id .

$.ajax({
                url : 'Webservice.asmx/' + WebServiceFunctionName + '',
                data : JSON.stringify(data),
                success : function(data) {
                    ReturnedData = data.hasOwnProperty("d") ? data.d : data;
                }

do i need to handle this through the store procedure , or is there any alternative.

does asp.net data controls encrypt record id , do i need to change the html table to server control ?

let me know if i am still not clear...


Viewing all articles
Browse latest Browse all 317

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>